2335 matches found
MacOS X 10.11 FTS Buffer Overflow
MacOS X 10.11 FTS Deep structure of the file system Buffer Overflow Credit: Maksymilian Arciemowicz CXSECURITY Website: http://cxsecurity.com/ http://cert.cx/ Affected software: - Commands such as: ls, find, rm - probably more Apple file system suffer for a issue recognised in FTS library. The ma...
MacOS X 10.11 Hardlink Resource Exhaustion
/ MacOS X 10.11 hardlink bomb cause resource exhaustion Avast PoC Credit: Maksymilian Arciemowicz CXSECURITY Website: http://cxsecurity.com/ http://cert.cx/ Affected software: - Commands such as: zip, tar, find - AntiVirus: Avast, Eset32 Let's back to an old bug, which Apple does not patch until...
Taxonomy Find - Unsupported - SA-CONTRIB-2015-153
This module enables you to add a simple search interface to lookup taxonomy terms by name. The module doesn't sufficiently sanitize output of taxonomy vocabulary names and term names. This vulnerability is mitigated by the fact that an attacker must have a role with the permission "Administer...
SAP NetWeaver J2EE Engine BP_FIND_JOBS_WITH_PROGRAM Function Module SQL Injection Vulnerability
SAP NetWeaver J2EE Engine is a service-oriented SAP SAP company's integrated application platform J2EE engine. BPFINDJOBSWITHPROGRAM function is one of the find the request for the specified program module. A SQL injection vulnerability exists in the BPFINDJOBSWITHPROGRAM function module in SAP...
PT-2015-7488
Name of the Vulnerable Software and Affected Versions SAP NetWeaver J2EE Engine version 7.40 Description The issue allows remote attackers to execute arbitrary SQL commands. This is due to a SQL injection vulnerability in the BP FIND JOBS WITH PROGRAM function module. Recommendations For SAP...
nissan.it XSS vulnerability
Vulnerable URL: http://www.nissan.it/content/GB/en/tool/find-dealer.html?location=x" Details: Description| Value ---|--- Patched:| Yes, at 03.10.2015 Latest check for patch:| 03.10.2015 14:43 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 107289 Google Pagerank...
Python IDLE 2.7.8 - Crash (PoC)
!/usr/bin/env python Title : Python IDLE 2.7.8 - Crash Proof Of Concept Website : http://www.python.org/idle/ Tested : Windows 7 / Windows 8.1 Author : Hadi Zomorodi Monavar Email : [email protected] 1 . run python code : python poc.py 2 . open r3z4.txt and copy content to clipboard 3 . open...
Internet Download Manager - Find Download Crash (PoC)
Internet Download Manager - Find Download Crash PoC !/usr/bin/env python Title : Internet Download Manager - Crash Proof Of Concept Affected Versions: All Version Founder : InternetDownloadManager Tested on Windows 7 / Server 2008 Author : Mohammad Reza Espargham Linkedin :...
Internet Download Manager - Find Download Crash (PoC)
!/usr/bin/env python Title : Internet Download Manager - Crash Proof Of Concept Affected Versions: All Version Founder : InternetDownloadManager Tested on Windows 7 / Server 2008 Author : Mohammad Reza Espargham Linkedin : https://ir.linkedin.com/in/rezasp E-Mail : meatrezadotes ,...
PCRE 'find_fixedlength()' function heap buffer overflow vulnerability
PCRE is a software developer Philip Hazel developed by the use of C language written in open source regular expression library . PCRE suffers from a heap buffer overflow vulnerability that could be exploited by an attacker to crash an affected application or execute arbitrary code...
UBUNTU-CVE-2015-5073
Heap-based buffer overflow in the findfixedlength function in pcrecompile.c in PCRE before 8.38 allows remote attackers to cause a denial of service crash or obtain sensitive information from heap memory and possibly bypass the ASLR protection mechanism via a crafted regular expression with an...
PT-2015-6766
Name of the Vulnerable Software and Affected Versions PCRE versions prior to 8.38 Description The issue is related to a heap-based buffer overflow in the find fixedlength function, which can be triggered by a crafted regular expression with an excess closing parenthesis. This can cause a denial o...
PT-2017-6151
Name of the Vulnerable Software and Affected Versions: netcf versions prior to 0.2.7 Description: The issue concerns the find ifcfg path function in netcf, which might allow attackers to cause a denial of service, resulting in an application crash. This can be achieved via vectors involving augea...
Lost Your Phone? Google Search 'Find My Phone' To Locate It
How many of you have an issue to forget your mobile phones? I guess, most of us. Sometimes in our homes, sometimes in our offices, sometimes in our cars and sometimes we even don’t remember the exact place where we left our phones. Now, Finding your phone is as simple as searching something on...
Nscan: Fast internet-wide scanner
Nscan: Fast internet-wide scanner Nscan is a fast Network scanner optimized for internet-wide scanning purposes and inspired by Masscan and Zmap. It has it’s own tiny TCP/IP stack and uses Raw sockets to send TCP SYN probes. It doesn’t need to set SYN Cookies so it doesn’t wastes time checking if...
Samsung Insists Find My Mobile Service Safe
Samsung this week tried to quell recent reports that its Find My Mobile service is vulnerable to hacking, firing back at NIST National Institute of Standards and Technology who warned last month that the feature could be exploited. In a blog post on the company’s global blog Tuesday, Samsung...
The Samsung“find mobile phone Find My Mobile”function the presence of 0Day vulnerabilities-vulnerability warning-the black bar safety net
! The U.S. National Institute of standards and Technology（NIST）to the majority of users warned: Samsung mobile phone“to retrieve mobile phone Find my mobile”function the presence of 0Day vulnerabilities. About the Find My Mobile The Samsung company after modification, to get back phone the Find m...
Samsung 'Find My Mobile' Flaw Allows Hacker to Remotely Lock Your Device
The National Institute of Standards and Technology NIST is warning users of a newly discovered Zero-Day flaw in the Samsung Find My Mobile service, which fails to validate the sender of a lock-code data received over a network. The Find My Mobile feature implemented by Samsung in their devices is...
Design/Logic Flaw
The Remote Controls feature on Samsung mobile devices does not validate the source of lock-code data received over a network, which makes it easier for remote attackers to cause a denial of service screen locking with an arbitrary code by triggering unexpected Find My Mobile network traffic...
CVE-2014-8346
The Remote Controls feature on Samsung mobile devices does not validate the source of lock-code data received over a network, which makes it easier for remote attackers to cause a denial of service screen locking with an arbitrary code by triggering unexpected Find My Mobile network traffic...